Privacy Policy
Data Collection and Telemetry
DockDoor Pro is built with privacy at its core. There is no telemetry, no analytics, no crash reporting, no advertising, no file scanning, and no tracking of your usage habits. The app runs locally on your Mac. It connects to the internet only for the following, each described in its own section below:
- Activating your license, then checking it about once a day. A free trial may check more often.
- Checking for updates, if automatic update checks are on.
- Weather forecasts, if you use the weather widget.
- Synced lyrics, while the Now Playing panel is open.
- The widget marketplace, to check for and install community widgets.
System Permissions
To work, DockDoor Pro needs these macOS permissions:
- Screen Recording: used only to draw live window previews and thumbnails. The images stay in memory on your Mac and are never saved to disk or sent anywhere.
- Accessibility: used to find, arrange and control windows, bring apps to the front, and control system functions like audio and power. We do not log keystrokes or track what you do in other apps.
- Automation: used for features that rely on AppleScript, such as emptying the Trash through Finder, reading Mail and Notes for their widgets, and switching Dark Mode.
Some widgets ask for more access, and only when you add them: Calendars and Reminders for the calendar, agenda and reminders widgets; Contacts for Quick Contacts; Photos for Recent Photos; your Desktop and Downloads folders for the screenshots and recent files widgets; the microphone for voice memos and the mic level; app audio for per-app volume; Bluetooth for Quick Toggles; and your location for local weather. What these widgets read is shown in the Dock on your Mac and is never uploaded. Voice memos are saved on your Mac. Location is used only as described under Weather.
License Activation
The app contacts our license server to activate your license and to check it again about once a day. It sends your license key, a one way hashed device identifier (SHA 256, computed on your Mac so raw hardware identifiers never leave your machine), and your Mac's computer name, which appears in the self-service device portal so you can recognize your own devices. A free trial may check more often and sends only the hashed device identifier, and we keep that identifier with the trial's start and end dates so each Mac gets one trial. All requests travel over HTTPS.
On our servers we retain only what license enforcement needs: the license key, hashed device identifiers, device names, activation and last-seen dates, and, for purchases made through our checkout provider, the order's transaction ID and a keyed one way hash of the purchase email used solely to return your key to you. We do not retain plaintext email addresses. IP addresses are never stored in readable form, only as keyed one way hashes: for rate limiting, where they expire automatically within minutes, and in request logs, which are deleted after 90 days and used only to detect abuse such as a shared license key.
Weather
If you add the weather widget, the app requests forecasts through our server rather than contacting a weather provider directly. Each request includes your license key, the same hashed device identifier used for activation, and the coordinates and timezone of the forecast location, which is either your approximate current location or a city you chose in settings. Our server passes only the coordinates to Apple's weather service to retrieve the forecast and returns it to the app.
If you use your current location, macOS Location Services provides it, and the app asks Apple's geocoding service, part of macOS, for the name of your city so it can show it. That lookup goes from your Mac to Apple under Apple's privacy policy, not through our servers.
We do not build or keep any location history. Forecasts are cached briefly under coordinates rounded to roughly a kilometer with no account or device attached, request logs contain only the same masked and hashed identifiers described above and never coordinates, and your location is never stored alongside your identity or shared with anyone beyond Apple's weather service for the sole purpose of retrieving your forecast.
Synced Lyrics
While the Now Playing panel is open, the app looks up time-synced lyrics for the current track from LRCLIB (lrclib.net), a free, independent lyrics database. The request contains only the track's artist, title and album. It does not include your license key, a device identifier, or anything about you, though like any web request it reveals your IP address to LRCLIB. Requests use HTTPS, and the app does not store cookies or cache the responses.
Widget Marketplace
When the app launches, when you open Settings, and when you browse or install community widgets, it downloads the widget list, preview images and widget files from our marketplace at widgets.dockdoor.net. These requests contain no license key, device identifier or personal information.
Community widgets are written by independent contributors. Each one's source code is public on GitHub and reviewed before it is published. An installed widget runs inside DockDoor Pro, and some widgets make their own network requests to do their job, such as fetching data from a service; what each widget does is described by its public source code.
Updates and Verification
If automatic update checks are on, the app checks our update feed at pro.dockdoor.net about once a day, and you can also check by hand. The request includes the app's version and no personal information. Updates are cryptographically signed and verified before they install, and license responses are signed so tampering can be detected. All communication uses HTTPS.
Third Parties
DockDoor Pro contains no advertising SDKs, no analytics frameworks and no tracking services, and we do not sell or share your data with third parties for their own use. The only outside services involved are the ones described above: Apple, for weather data and city names, and LRCLIB, for lyrics. Purchases are processed by independent checkout providers acting as merchant of record; they collect and handle your payment details and email under their own privacy policies, and we never receive your payment card information.
Where Data Is Processed
Our license, weather and update servers run on cloud infrastructure located in the United States. If you use DockDoor Pro from outside the US, the minimal data described above is processed there under the safeguards described in this policy.
Contact and Your Rights
DockDoor Pro is developed by Kepler Cafe, based in the United States. You can see the devices activated on your license at any time in the self-service portal, and remove them yourself. For any privacy question, or to request a copy or deletion of the license data we hold about you, email [email protected] and we will respond promptly. Because we keep so little, a deletion request simply removes your license record and its hashed device identifiers; note that this deactivates the license itself, since that record is the only thing we hold.